claude-arabic

The skill’s stated purpose and capabilities mostly align: it installs a VS Code extension and launcher to improve RTL rendering for Claude Code. The main concern is install trust: it uses direct pipe-to-shell/PowerShell execution from a personal GitHub repository, then performs npm-based dependency installation and local extension deployment. That makes it suspicious from a supply-chain perspective, but there is no clear evidence here of credential harvesting, covert exfiltration, or behavior fundamentally unrelated to the claimed purpose.